Re: [PATCH] libmnl: security context retrieval in nf-queue example

[Pablo Neira Ayuso <pablo@netfilter.org>]

On Tue, Jun 16, 2015 at 06:14:47PM +0200, Roman Kubiak wrote:
> Below is a complete libnetfilter_queue patch:
> 
> 
> [PATCH] libnetfilter_queue: add security context information
> 
> This commit adds security context information structures
> and functions.
> 
> This will allow userspace to find the security context of each
> packet (if it exists) and make decisions based on that.
> It should work for SELinux and SMACK.

Applied with minor glitch. Thanks.

> @@ -76,7 +80,7 @@ static int cb(struct nfq_q_handle *qh, struct nfgenmsg *nfmsg,
>  {
>  	uint32_t id = print_pkt(nfa);
>  	printf("entering callback\n");
> -	return nfq_set_verdict(qh, id, NF_ACCEPT, 0, NULL);
> +	return nfq_set_verdict2(qh, id, NF_ACCEPT, 0x3, 0, NULL);

I have kept back this chunk to set the packet mark to 3. It doesn't
belong here.